This sense of urgency means one of two things, and probably both. The business has either had a security breach involving credit card fraud, or they have just been hit with non-compliance penalties. While it’s not known how often these things actually happen, what we do know is that businesses don’t want to talk about it, and the associated costs are usually buried where nobody will find them.